Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230302e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3230302e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          mDhafKDCAuy2sl8C8syLXXE6uSIbF1x92RkkddZxUJw=
Subject key identifier:   2D:D3:0D:3A:4A:61:86:A4:4A:A8:86:67:0A:16:33:E4:3B:2E:36:49
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       10A1FE27647AB502B0E726342A36675D5D71ADAB
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230302e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 21 May 2026 21:28:06 +0000
ROA not before:           Thu 21 May 2026 21:23:06 +0000
ROA not after:            Thu 20 May 2027 21:28:06 +0000
asID:                     11802
IP address blocks:        200.19.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a1:fe:27:64:7a:b5:02:b0:e7:26:34:2a:36:67:5d:5d:71:ad:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: May 21 21:23:06 2026 GMT
            Not After : May 20 21:28:06 2027 GMT
        Subject: CN=2DD30D3A4A6186A44AA886670A1633E43B2E3649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:df:e2:e1:7f:68:0b:4d:b9:29:5d:3b:ec:b9:
                    43:ec:a7:00:a3:ee:3d:16:3e:46:f5:8f:6e:c1:4c:
                    77:d7:91:25:b1:22:e1:1f:12:14:80:49:d8:6e:a4:
                    04:c7:aa:d0:64:79:ca:e1:50:60:f8:93:22:a7:88:
                    c5:a7:d3:a9:c5:45:5c:b4:59:d4:57:c0:df:fe:7e:
                    c8:1b:d4:4e:ff:c7:84:6d:eb:aa:ec:bd:5c:93:ef:
                    4e:1b:d8:2a:6b:1c:72:ce:61:10:d2:4f:ce:a0:64:
                    76:5a:16:9a:5c:79:cf:25:1a:3f:24:63:08:67:7c:
                    f6:0f:68:9f:d4:4c:a5:52:ee:f1:15:8a:00:3d:ef:
                    38:3c:ea:b6:d3:52:cf:41:b3:44:c0:87:e5:4e:74:
                    05:74:53:1e:e9:b0:c2:03:71:43:16:aa:de:2e:3d:
                    01:7c:3f:1a:3a:6f:45:58:d9:cf:06:49:39:d2:6e:
                    11:d0:a3:bc:62:44:2d:b4:7e:8c:2c:f2:13:ef:f9:
                    5d:88:56:56:9d:86:a7:fb:8a:2d:98:7a:35:1b:71:
                    08:20:a8:4c:0c:7d:ae:2a:df:86:b1:93:7c:0e:e7:
                    4a:e8:b2:90:00:16:d8:41:d2:96:6e:4d:98:2a:62:
                    47:b3:23:c9:fa:3e:20:9e:41:32:7b:97:6a:5e:10:
                    01:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D3:0D:3A:4A:61:86:A4:4A:A8:86:67:0A:16:33:E4:3B:2E:36:49
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230302e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:fc:45:b2:46:35:c5:0f:1d:d8:bb:6a:5b:f7:1b:38:02:48:
         87:95:0e:93:ba:dd:44:83:5e:55:53:17:4a:94:ab:1f:e1:3d:
         bc:01:cd:d1:03:f0:e2:1e:7b:1c:ae:29:fa:92:ad:d6:18:e3:
         6d:4d:d7:d8:9b:b4:ef:73:18:75:cd:3a:25:87:1f:fd:b9:7c:
         89:05:2a:cb:77:1a:c4:75:e3:2a:6d:46:2a:ed:30:a4:20:c3:
         bf:03:f2:23:3a:7b:f4:02:bb:1c:ac:5c:05:f5:6d:c2:3e:0a:
         66:43:0b:aa:7c:c9:31:70:85:8f:57:15:4b:4b:9a:9b:e1:f5:
         3d:d6:44:7a:bc:b3:c8:c8:f5:75:12:f4:66:57:6c:f3:11:9b:
         c8:70:ce:4b:35:d4:85:de:62:f0:f6:cc:88:5e:e7:a7:e8:5a:
         be:35:fd:db:ab:3f:19:75:d7:50:59:80:b0:c7:ac:6b:f1:27:
         23:f8:36:7c:c9:ff:69:cd:2f:b4:f1:56:5c:01:b9:bd:63:6c:
         09:9f:a0:de:3b:a7:c4:a6:0b:5c:ad:f5:a8:ca:73:0d:0b:e9:
         2f:a9:6b:e5:8f:c3:cd:8c:2c:1b:cd:f0:fd:54:b8:44:81:29:
         75:b3:a7:4a:e8:f4:c8:1c:3f:6f:52:b0:30:51:2a:ff:23:14:
         69:63:01:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:42:36 2026 by rpki-client